Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198100.roa
File:                     AS198100.roa (raw, json)
Hash identifier:          63CNi1m+uZVPytBoqFHYLQgfBJVjkFutl72nGLjzr3M=
Subject key identifier:   34:7B:6C:12:74:5F:C6:D2:CF:0F:10:79:BF:09:FE:13:8A:1F:A7:90
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       72F10C4B0B178E632408FBA96C16806B88A37994
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198100.roa
Signing time:             Sun 15 Oct 2023 09:32:59 +0000
ROA not before:           Sun 15 Oct 2023 09:27:59 +0000
ROA not after:            Sun 13 Oct 2024 09:32:59 +0000
asID:                     198100
IP address blocks:        104.234.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 May 2024 13:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f1:0c:4b:0b:17:8e:63:24:08:fb:a9:6c:16:80:6b:88:a3:79:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 15 09:27:59 2023 GMT
            Not After : Oct 13 09:32:59 2024 GMT
        Subject: CN=347B6C12745FC6D2CF0F1079BF09FE138A1FA790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:3a:0c:a4:ae:f3:7a:91:8f:e3:95:ca:f2:
                    b0:f4:0f:89:66:3f:0c:8c:31:b1:fb:79:12:bf:94:
                    e2:d0:57:30:b2:2b:8f:f1:64:e1:49:ab:89:4f:1f:
                    9e:0b:86:d5:1e:01:e9:b7:29:e9:79:5b:53:fd:9b:
                    7e:0c:de:03:15:f1:9e:5f:6f:15:b3:c5:e7:6c:88:
                    74:41:a1:31:09:5c:5f:56:5d:81:4f:5c:19:c4:a8:
                    cb:2f:d8:44:63:94:02:57:c6:d7:e6:51:66:78:0b:
                    d7:99:66:24:01:2f:16:50:eb:b4:0f:28:89:f7:1c:
                    7d:6e:7d:63:ad:77:8b:fa:57:bf:95:ac:27:b1:97:
                    1c:99:5d:ec:d7:0e:c5:6b:3f:63:53:57:bd:01:40:
                    ce:ff:0c:26:2a:c1:54:59:16:ae:2e:07:f2:92:85:
                    45:14:18:99:7b:0a:a2:39:a1:cd:7b:d7:53:c3:01:
                    c2:23:5e:e7:75:38:e1:27:0f:72:a7:ca:84:1b:54:
                    c1:9a:c3:56:6a:05:e1:83:84:b9:23:83:dd:dc:76:
                    f9:8b:ea:50:0d:b5:ee:57:9b:b7:8c:fb:5b:82:42:
                    25:7d:5b:97:98:62:4a:c3:1b:dc:19:8f:5f:27:74:
                    9b:a0:44:eb:87:d0:cd:96:33:3c:b9:91:41:05:2a:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7B:6C:12:74:5F:C6:D2:CF:0F:10:79:BF:09:FE:13:8A:1F:A7:90
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:df:96:90:69:6c:1c:d1:5b:56:24:c9:74:44:90:dd:4e:ec:
         c3:69:35:f7:72:ef:e4:2e:c1:b3:f1:bc:fb:f3:b5:8a:54:ae:
         50:ad:3d:1b:65:41:45:a7:d7:5b:d1:c4:15:32:6d:ce:66:a6:
         a0:ab:16:ce:c7:82:a3:49:01:b2:8c:3b:02:7c:39:d1:03:89:
         62:d6:cc:33:fc:3b:da:68:7d:9d:ef:2d:f1:dd:d6:ff:b2:7c:
         8f:b7:5a:fc:c4:b8:fe:e8:3e:6e:17:4c:8e:f5:0a:8c:d4:d8:
         53:80:fc:7c:9c:a4:35:95:e4:7e:06:3f:dc:73:93:30:bb:3c:
         26:be:4c:8a:11:14:74:a5:fa:84:4c:d9:95:9a:83:59:da:c6:
         df:d6:1a:03:cd:f8:3c:a9:2a:8b:b4:91:1a:2a:4c:86:2c:46:
         52:d0:52:16:1b:8b:15:b0:5e:8f:bf:a6:9f:43:5f:5f:26:e3:
         3a:49:75:ab:7b:4b:18:2c:3f:3a:21:3f:12:76:30:06:15:63:
         43:6e:89:e3:3f:17:20:dd:69:5d:a2:6f:3a:b2:53:69:16:fd:
         b0:0c:eb:52:e3:6a:73:9c:f3:bf:39:9f:df:fd:71:31:b8:2f:
         80:42:02:88:ee:4a:8b:d0:20:c9:a5:4f:23:52:aa:e0:85:4f:
         0a:64:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:30 2024 by rpki-client on console-fra.rpki-client.org